Description
SQL injection vulnerability in the Extbase Framework in TYPO3 4.5.x before 4.5.24, 4.6.x before 4.6.17, 4.7.x before 4.7.9, and 6.0.x before 6.0.3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to "the Query Object Model and relation values."
Remediation
References
Related Vulnerabilities
Joomla! Core Cross-Site Scripting (2.5.0 - 3.9.24)
WordPress 4.0.x Arbitrary File Deletion Vulnerability (4.0 - 4.0.23)
WordPress Plugin Transposh WordPress Translation Multiple Vulnerabilities (1.0.8.1)
Apache HTTP Server Resource Management Errors Vulnerability (CVE-2011-1928)
Oracle Database Server CVE-2006-0257 Vulnerability (CVE-2006-0257)